cbcvebase.
CVE-2008-0202
published 2008-01-10

CVE-2008-0202: CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…

PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.24%
65.5th percentile
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.

Affected

1 ranges
VendorProductVersion rangeFixed in
expressionengineexpressionengine<= 1.2.1—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.